
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft
File: o0K4Har3eauhbTK2-wuDD4ULT_A.mft (raw, json)
Hash identifier: wRT6UuyX+pHbuX2fAVPtOMK+wTRMwFRKhkIH7e+ajNg=
Subject key identifier: E5:8D:56:E1:A9:A6:21:53:07:C0:B5:DC:0A:4A:49:AB:D0:58:2A:E0
Authority key identifier: A3:42:B8:1D:AA:F7:79:AB:A1:6D:32:B6:FB:0B:83:0F:85:0B:4F:F0
Certificate issuer: /CN=A91A1205/serialNumber=A342B81DAAF779ABA16D32B6FB0B830F850B4FF0
Certificate serial: 0C7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft
Manifest number: 0C72
Signing time: Thu 26 Mar 2026 18:31:20 +0000
Manifest this update: Thu 26 Mar 2026 18:31:19 +0000
Manifest next update: Thu 02 Apr 2026 18:31:19 +0000
Files and hashes: 1: o0K4Har3eauhbTK2-wuDD4ULT_A.crl (hash: Kur9OdSO9gdu2nSg0PFic6EOkJj1ufavGmMuwObIvfI=)
2: 3D992D3A1A8411EAA026D229C4F9AE02.roa (hash: gdFcJrPQtvbCIqeSBLzpbCtAXnKIWEBcSmlGfLFP1iM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.crl
rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 18:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3195 (0xc7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1205, serialNumber=A342B81DAAF779ABA16D32B6FB0B830F850B4FF0
Validity
Not Before: Mar 26 18:31:19 2026 GMT
Not After : Apr 2 18:31:19 2026 GMT
Subject: CN=69c57b77-2955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:42:fc:7e:00:6f:55:77:7f:d1:dc:18:77:
e1:17:ed:52:f9:59:e6:16:eb:65:c0:86:aa:d2:98:
57:8b:aa:70:b2:20:ad:49:6f:73:bb:02:99:95:2b:
83:4f:dd:62:b3:28:3b:70:50:00:24:c8:bb:de:8b:
1f:ba:b1:89:76:82:3f:9b:2b:e0:87:0b:0e:ab:0e:
29:11:3e:61:4e:92:b9:22:1b:fb:f4:71:dc:8a:99:
c1:4d:fa:6d:73:4e:d9:ea:21:c1:f2:73:46:18:0c:
a9:69:c0:72:36:47:d6:75:e2:b7:25:60:98:7d:38:
a3:a1:7a:b8:11:6d:0f:89:de:53:23:ee:3b:d5:95:
24:7f:fe:94:e7:c7:1a:1c:c3:17:e2:12:64:73:07:
4e:9b:d6:b2:b2:6c:25:2a:af:60:c8:08:af:9a:10:
cf:ef:7c:df:2d:5a:40:87:82:18:12:e0:1c:02:83:
76:4e:d0:bc:92:52:4b:1b:84:5d:9e:1f:b6:5e:26:
e4:93:3e:af:dd:4e:61:e8:60:da:2e:fa:5c:4a:3e:
d5:79:2c:0e:89:ab:97:e0:a4:b7:73:b7:41:04:dc:
53:9f:6a:78:28:08:55:eb:f2:ad:9d:eb:88:e8:74:
6e:7a:6c:3a:91:1e:b8:45:56:7e:be:6f:03:70:d9:
ae:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8D:56:E1:A9:A6:21:53:07:C0:B5:DC:0A:4A:49:AB:D0:58:2A:E0
X509v3 Authority Key Identifier:
keyid:A3:42:B8:1D:AA:F7:79:AB:A1:6D:32:B6:FB:0B:83:0F:85:0B:4F:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:cc:e3:9e:7e:cd:3a:6a:c5:69:8e:75:85:0c:d4:f9:27:20:
53:b0:51:a1:2f:88:93:d2:1d:0b:20:26:61:e3:90:24:6e:ec:
56:a2:5b:87:e7:d0:0c:f3:94:1a:7b:e4:8b:d0:91:13:d3:f3:
7c:78:f4:db:47:20:a9:21:c8:b7:c7:af:ee:82:ab:bf:4b:76:
a8:ac:dc:8a:8a:53:a7:cd:ed:55:6a:14:1e:a1:5f:a8:f7:da:
86:6a:16:e8:9d:da:9b:bb:a4:ce:30:fe:af:72:f6:a5:cb:e3:
c7:19:ed:42:aa:65:0e:46:e9:a7:e8:4c:b2:2a:0a:8c:94:cf:
b4:11:6a:e2:13:96:9b:83:73:ff:80:f6:45:c0:72:e2:c5:43:
cb:44:68:af:c3:37:25:56:05:6a:3f:41:ff:84:82:a1:c7:69:
4e:ef:a6:2f:b3:68:e2:1d:6a:af:3a:cb:3d:b5:9a:bd:d6:9c:
b7:62:e6:eb:21:c3:2b:c5:08:64:e6:54:b6:a4:51:76:3e:3f:
df:0e:db:9b:5f:ad:50:fc:ef:86:d7:00:82:97:05:4e:8c:bf:
b0:7d:fd:29:61:24:3a:37:f2:54:49:7a:79:17:a5:b7:16:fd:
9b:67:73:a7:9b:c1:22:bf:f5:91:1a:b3:1e:31:2b:15:2e:d2:
8d:65:42:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTEyMDUxMTAvBgNVBAUTKEEzNDJCODFEQUFGNzc5QUJBMTZEMzJCNkZCMEI4MzBG
ODUwQjRGRjAwHhcNMjYwMzI2MTgzMTE5WhcNMjYwNDAyMTgzMTE5WjAYMRYwFAYD
VQQDEw02OWM1N2I3Ny0yOTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwVBC/H4Ab1V3f9HcGHfhF+1S+VnmFutlwIaq0phXi6pwsiCtSW9zuwKZlSuD
T91isyg7cFAAJMi73osfurGJdoI/myvghwsOqw4pET5hTpK5Ihv79HHcipnBTfpt
c07Z6iHB8nNGGAypacByNkfWdeK3JWCYfTijoXq4EW0Pid5TI+471ZUkf/6U58ca
HMMX4hJkcwdOm9aysmwlKq9gyAivmhDP73zfLVpAh4IYEuAcAoN2TtC8klJLG4Rd
nh+2Xibkkz6v3U5h6GDaLvpcSj7VeSwOiauX4KS3c7dBBNxTn2p4KAhV6/KtneuI
6HRuemw6kR64RVZ+vm8DcNmu4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOWNVuGp
piFTB8C13ApKSavQWCrgMB8GA1UdIwQYMBaAFKNCuB2q93mroW0ytvsLgw+FC0/w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTIwNS83RDIzMUUwNDFB
NTUxMUVBODgwNDIyMTFDNEY5QUUwMi9vMEs0SGFyM2VhdWhiVEsyLXd1REQ0VUxU
X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL28wSzRIYXIzZWF1aGJUSzItd3VERDRVTFRfQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTIwNS83RDIzMUUwNDFBNTUxMUVBODgwNDIyMTFDNEY5QUUwMi9vMEs0SGFyM2Vh
dWhiVEsyLXd1REQ0VUxUX0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADMzjnn7NOmrFaY51hQzU+ScgU7BRoS+Ik9IdCyAmYeOQJG7sVqJbh+fQDPOU
Gnvki9CRE9PzfHj020cgqSHIt8ev7oKrv0t2qKzciopTp83tVWoUHqFfqPfahmoW
6J3am7ukzjD+r3L2pcvjxxntQqplDkbpp+hMsioKjJTPtBFq4hOWm4Nz/4D2RcBy
4sVDy0Ror8M3JVYFaj9B/4SCocdpTu+mL7No4h1qrzrLPbWavdact2Lm6yHDK8UI
ZOZUtqRRdj4/3w7bm1+tUPzvhtcAgpcFToy/sH39KWEkOjfyVEl6eReltxb9m2dz
p5vBIr/1kRqzHjErFS7SjWVCIw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:36:24 2026 by rpki-client